Information
Trust only those CAs that are required by clients and servers.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.as it requires running the 'orapki' command line utility to verify compliance.
NOTE: Run the command 'orapki wallet display -wallet wallet_location' to verify only required CAs are listed.
Solution
Oracle Wallet Trusted Certificates - Remove certificate authorities (CAs) that are not required